Yes, yes. Though the site is still http, not https. I need to get on that one of these days.

Yes, for the sake of your visitors. If your site is only http, then middleboxes can use your site load to opportunistically attack the visitor.

Of course, the probability that a visitor would not visit any other non-TLS site that day is low, but that probability is getting lower with every passing day.

Most modern web hosts support both SFTP and FTPS. The same applies for FTP clients.

I don’t know if I’ve ever seen FTPS in the wild.